How We Support Your CMMC and NIST 800-171 Compliance Efforts

Posted in Security

Customers pursuing Department of Defense contracts are often required to implement cybersecurity controls to protect Controlled Unclassified Information (CUI) and support Cybersecurity Maturity Model Certification (CMMC) requirements.

While no backup solution by itself can make an organization CMMC compliant, Dr.Backup provides critical data protection and security capabilities that help our customers implement and demonstrate compliance with many of the technical safeguards commonly assessed during CMMC assessments and NIST SP 800-171 compliance reviews.

Key capabilities include:

  1.  Strong encryption of backup data before transmission including support for AES-256 encryption
  2.  Customer-controlled encryption keys, to help ensure that protected data remains inaccessible to unauthorized parties
  3.  Encrypted communications channels for backup and recovery operations
  4.  Secure backup infrastructure protected by enterprise-grade firewall technology and monitored access controls
  5.  Redundant storage architectures designed to maintain data integrity and availability
  6.  Resilience against ransomware through layered backup, recovery and endpoint security technologies (optional services)
  7.  Protection of Microsoft 365 workloads including OneDrive and SharePoint documents, as well as files, databases, and other business-critical information
  8.  Operational processes to help ensure confidentiality, data integrity, availability, and rapid recovery of business data

Summary information describing our encryption, access controls, backup retention, recovery procedures, and security practices is available on our website. Detailed security documents, including our SOC 2 Type II attestation report is available upon request to qualified customers undergoing compliance assessments.

While Dr.Backup can provide relevant documentation regarding our security practices and controls, our standard subscription services do not include participation in customer CMMC assessments or the completion of compliance questionnaires.

Important: CMMC certification applies to the assessed organization and its implemented policies, procedures, and security controls. Dr.Backup contributes critical technical safeguards that support those requirements but does not independently confer CMMC certification upon a customer organization.